Vulnerabilities in EVbee
9 resultsCVE-2026-22095CRITICALCommand injection in diagnosis web endpointEPSS —CVE-2026-22098CRITICALSensitive information is written to logsEPSS —CVE-2026-22102CRITICALArbitrary file overwrite through certificate update functionalityEPSS —CVE-2026-22100HIGHComnand injection in OCPP ReserveLogin messageEPSS —CVE-2026-22096CRITICALMissing authentication for webserver endpointsEPSS —CVE-2026-22093CRITICALAdversary-in-the-Middle (AitM) attack vulnerability in EVbee Service appEPSS —CVE-2026-22103CRITICALCommand injection in NPC start web endpointEPSS —CVE-2026-22099HIGHMissing authentication for Bluetooth communicationEPSS —CVE-2026-22097CRITICALMissing firmware validation allows remote code executionEPSS —